This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          ITT/WTcK5f39XVC/H+qGsxO74gUtXFZM2wgHD5gEcBg=
Subject key identifier:   06:21:A6:8F:85:D5:A3:4C:B4:63:52:D7:7F:2B:3C:7E:FA:C2:F2:CD
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       548F2E96AD733CC15A55AEFD5E5E1528F756E283
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:26 +0000
ROA not before:           Mon 08 Dec 2025 01:30:26 +0000
ROA not after:            Mon 07 Dec 2026 01:35:26 +0000
asID:                     28594
IP address blocks:        200.218.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8f:2e:96:ad:73:3c:c1:5a:55:ae:fd:5e:5e:15:28:f7:56:e2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:26 2025 GMT
            Not After : Dec  7 01:35:26 2026 GMT
        Subject: CN=0621A68F85D5A34CB46352D77F2B3C7EFAC2F2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:19:5a:cf:9f:fc:23:76:ed:e0:ab:4b:ab:
                    ee:69:b2:a6:09:c9:14:63:ff:20:55:b9:4d:23:0f:
                    e1:7e:64:45:7b:b1:87:77:a0:88:59:eb:91:d4:80:
                    00:6c:a8:d1:46:21:1b:23:81:09:ae:42:ab:50:31:
                    c0:6d:10:ec:86:14:b0:0d:0d:b0:a6:f1:b1:bc:92:
                    52:35:cc:71:c5:41:74:aa:63:65:1b:0e:7b:99:34:
                    ab:5f:45:e1:7e:bd:b7:f1:6b:55:f5:fc:b6:fe:29:
                    d1:28:56:0d:83:28:9d:35:9b:5d:d8:9d:58:64:91:
                    c9:5e:0a:a3:ce:10:83:ec:45:f9:bd:12:f7:25:80:
                    65:53:89:71:43:15:10:ab:83:71:0f:9c:6d:ff:c6:
                    92:1b:b2:d6:c9:1d:73:ec:4a:23:44:f5:ca:0d:b3:
                    12:fc:13:63:0e:04:83:66:93:00:3b:87:e1:06:d2:
                    f5:4b:67:cd:9a:8c:08:b4:e5:e4:be:2d:5e:b9:3f:
                    1a:5f:be:4c:75:a8:d0:c4:17:c3:01:30:6e:d8:e6:
                    ee:6f:a3:c0:d0:6e:44:d7:d5:5c:2c:f1:58:8c:c6:
                    89:85:11:65:7b:db:31:1c:4b:5b:a1:f1:15:88:96:
                    f0:4d:74:61:fe:0d:58:b7:5d:1f:b3:8b:5c:d3:40:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:A6:8F:85:D5:A3:4C:B4:63:52:D7:7F:2B:3C:7E:FA:C2:F2:CD
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:ae:8f:c8:98:d9:11:e9:eb:81:09:5e:a5:1d:54:5f:dd:a3:
         a6:1e:bb:1e:28:94:a1:98:a1:11:13:c7:e9:b5:06:72:8c:81:
         a1:52:e9:7a:50:be:05:f3:cc:bd:7b:7c:18:7a:2f:2a:67:31:
         00:ac:a9:3c:94:ce:8f:47:99:48:eb:53:51:46:e5:0b:86:a6:
         e8:c8:ba:29:7f:1e:72:7a:4e:4b:de:52:c7:6f:e1:6c:c6:32:
         f8:36:89:22:f9:af:e3:8a:1a:4c:df:ac:a2:53:bc:50:17:5b:
         d3:7d:46:57:04:8b:62:d1:7e:27:c2:66:84:19:3f:23:39:d2:
         44:6b:63:da:c1:05:3c:9b:8c:23:ea:6b:a0:5c:e4:2e:33:4c:
         08:f3:7f:06:81:5a:97:11:86:2c:2a:9d:97:fa:8a:43:70:2e:
         ae:59:80:13:ca:72:8c:5c:ca:3a:93:85:36:2b:05:26:94:9b:
         81:c0:dc:b4:18:b8:5e:7c:3f:34:2d:9e:e6:98:a7:58:16:37:
         14:df:4e:e8:ae:6b:5a:ff:fa:36:61:4a:d0:06:a0:64:78:93:
         4b:11:76:26:0c:5e:0e:bd:6f:0a:85:36:eb:8e:80:a0:60:91:
         eb:9f:0b:96:9a:86:05:c0:7c:c0:8b:c0:43:2a:0f:c6:a7:2b:
         ad:af:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:18 2025 by rpki-client